DLFT_Shutdown
DLFT_Startup
Behavioral task
behavioral1
Sample
a9ac13025fb6c5dacafe9124a15f18a125116bcc320561f86be67bd558ab53b9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9ac13025fb6c5dacafe9124a15f18a125116bcc320561f86be67bd558ab53b9.dll
Resource
win10v2004-20220812-en
Target
a9ac13025fb6c5dacafe9124a15f18a125116bcc320561f86be67bd558ab53b9
Size
133KB
MD5
afbbf9562c6236044c1534ab854a8c01
SHA1
d1ae5a97806738f647b839cb96539739a2c5647b
SHA256
a9ac13025fb6c5dacafe9124a15f18a125116bcc320561f86be67bd558ab53b9
SHA512
eb37bdbf2f252396f5eac040305bee8e26b0f3396b668441820a83e3ff82734651d37d09c31d6e988a4f479cdf30152f2fd9ed9683dbb208873cee57c63f6daa
SSDEEP
3072:2DyusWlYTxhtcQIxj3NlbAYPEB0q1I1sxR98FNG5Vd:2Dy2lYTxENxRdAzP9vf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DLFT_Shutdown
DLFT_Startup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ